Buffer overflow in Cisco Webex Advanced Recording Format Player
CVE-2010-3043
Multiple buffer overflows in the Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players T27LB before SP21 EP3 and T27LC before SP22 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted (1) .wrf or (2) .arf file, a different vulnerability than CVE-2010-3041, CVE-2010-3042, and CVE-2010-3044.
Vulnerability class: Buffer Overflow
EPSS: 0.051 (91.5th percentile) — read the EPSS interpretation.
Affected products
- Cisco Webex_advanced_recording_format_player — versions 26.49, 27.10, 27.11.0.3328
- Cisco Webex_recording_format_player — versions 26.49, 27.10, 27.11.0.3328
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- psirt@cisco.com (vdb-entry, x_refsource_XF)
- psirt@cisco.com (x_refsource_CONFIRM)
- psirt@cisco.com (vdb-entry, x_refsource_BID)
- psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)
Frequently asked questions
- What is CVE-2010-3043?
- CVE-2010-3043 is a vulnerability in Cisco Webex Advanced Recording Format Player, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2011-02-02.
- Is CVE-2010-3043 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.